CVE-2023-28793 — Heap Based Buffer Overflow in Library

CVE-2023-28793

Heap Based Buffer Overflow in Library PUBLISHED

Description (CNA)

Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 1.3.1.6

CWE

CWE-94

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19

ADP enrichment

CVE

No English description supplied.

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19

CISA-ADP

No English description supplied.

No references supplied.